$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aff240dd-81d1-322b-9bb2-f6722f21a5ef.roa File: aff240dd-81d1-322b-9bb2-f6722f21a5ef.roa (raw, json) Hash identifier: 6Zi7exxEdDE6VQZs76jBQgUdBoLZehyv7A7HhxU+yyE= Subject key identifier: E0:38:1B:8E:BB:AE:CD:03:23:20:94:DF:F5:10:A3:BB:61:E7:E8:EA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858490CB158D23B1FCA006756C100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aff240dd-81d1-322b-9bb2-f6722f21a5ef.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 36625 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:58:d2:3b:1f:ca:00:67:56:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=4c930e6b-6c41-46f3-8eb7-4889e7ae4a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8c:44:a3:61:2e:4a:9d:7c:bd:60:6a:82:fd: 87:ff:0f:a7:b6:0d:7d:62:bd:d7:d3:a9:bc:2a:61: e8:f1:41:87:03:3a:99:bc:e6:6c:cc:25:a2:11:2b: 7f:93:12:4a:d1:c5:1b:da:62:54:b3:0b:91:7d:c4: a0:b8:6f:fa:5f:56:51:6b:51:41:14:48:4a:c5:50: e2:85:7d:27:d9:ff:f9:c3:73:96:5b:d1:19:90:ed: 24:d3:49:d1:c1:8a:9a:32:44:e4:e7:95:83:3d:4e: 18:04:1c:b9:f7:6a:6b:00:b0:42:81:ec:be:c6:f9: 31:b2:e1:92:f3:34:e2:58:31:b5:73:8a:9c:c1:84: ba:60:fa:72:b8:09:b2:de:76:16:da:c6:83:23:7b: 48:92:42:ac:7c:30:23:f5:da:c7:f6:99:61:76:20: 65:76:ae:46:16:07:7f:90:6b:d4:10:e4:85:e5:83: 77:25:eb:2e:f9:51:cd:07:3b:4b:e2:41:59:ec:e5: c1:66:29:5a:2b:b1:f8:aa:83:67:39:03:6d:c2:b7: 13:25:e7:17:1c:1d:84:ab:40:75:a2:2e:43:a2:f8: be:df:6c:85:97:59:4a:8e:9e:cc:1e:70:5a:c8:5f: fc:e5:70:b1:c6:80:f2:b2:fc:39:f5:8a:d1:3c:37: 2e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:38:1B:8E:BB:AE:CD:03:23:20:94:DF:F5:10:A3:BB:61:E7:E8:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aff240dd-81d1-322b-9bb2-f6722f21a5ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:3f:4c:31:31:f7:45:ad:1b:af:2a:20:bc:01:ee:f8:7f:2c: 07:43:a1:87:a3:01:90:c5:48:1a:25:0f:70:e4:f6:4b:c8:a5: ff:77:e2:45:21:d6:54:7d:26:1d:bb:c0:e9:fa:fd:48:a1:eb: b4:83:5b:3c:f5:9c:ae:8e:1d:d1:21:a9:7b:b7:50:5e:d0:e7: a2:b4:5d:56:ba:5d:5d:15:b3:78:87:f2:5d:c0:09:a5:bf:81: 9a:ad:95:2e:82:3d:72:12:31:15:3f:92:aa:d4:2c:61:bb:eb: a5:af:27:af:b0:0e:83:e9:b6:14:e6:06:6a:75:19:ff:72:1a: ae:0a:26:bc:00:9f:5d:35:d0:35:f3:71:27:98:0c:d6:05:21: 9d:e7:3e:ba:72:a7:62:dd:9e:63:5c:f5:04:ed:b6:76:e5:6c: 2a:1b:5e:9c:9b:09:84:77:d6:01:7c:ff:6c:83:23:2e:aa:b3: bd:83:6c:6d:57:0c:23:46:f0:67:20:6f:c5:98:ee:32:49:66: 69:b7:c6:b0:2e:b2:d6:6e:6f:71:c1:1d:1b:37:91:c6:43:3f: 32:e3:e1:6e:6b:b6:f3:27:09:9f:af:18:31:3f:21:64:18:49: 48:5f:23:1d:35:79:1a:d2:1b:dc:28:ba:d4:c3:28:bb:26:cd: a0:e7:10:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsVjSOx/KAGdWwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk NGM5MzBlNmItNmM0MS00NmYzLThlYjctNDg4OWU3YWU0YTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoxEo2EuSp18vWBqgv2H/w+ntg19Yr3X06m8 KmHo8UGHAzqZvOZszCWiESt/kxJK0cUb2mJUswuRfcSguG/6X1ZRa1FBFEhKxVDi hX0n2f/5w3OWW9EZkO0k00nRwYqaMkTk55WDPU4YBBy592prALBCgey+xvkxsuGS 8zTiWDG1c4qcwYS6YPpyuAmy3nYW2saDI3tIkkKsfDAj9drH9plhdiBldq5GFgd/ kGvUEOSF5YN3Jesu+VHNBztL4kFZ7OXBZilaK7H4qoNnOQNtwrcTJecXHB2Eq0B1 oi5Dovi+32yFl1lKjp7MHnBayF/85XCxxoDysvw59YrRPDcuCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOA4G467rs0DIyCU3/UQo7th5+jqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWZmMjQwZGQtODFkMS0z MjJiLTliYjItZjY3MjJmMjFhNWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGI/TDEx90WtG68qILwB7vh/LAdDoYejAZDFSBolD3Dk9kvIpf934kUh 1lR9Jh27wOn6/Uih67SDWzz1nK6OHdEhqXu3UF7Q56K0XVa6XV0Vs3iH8l3ACaW/ gZqtlS6CPXISMRU/kqrULGG766WvJ6+wDoPpthTmBmp1Gf9yGq4KJrwAn1010DXz cSeYDNYFIZ3nPrpyp2LdnmNc9QTttnblbCobXpybCYR31gF8/2yDIy6qs72DbG1X DCNG8Gcgb8WY7jJJZmm3xrAustZub3HBHRs3kcZDPzLj4W5rtvMnCZ+vGDE/IWQY SUhfIx01eRrSG9woutTDKLsmzaDnELQ= -----END CERTIFICATE-----Generated at Sun Apr 27 16:35:48 2025 by rpki-client